$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa File: add55bdb-6ba7-3da3-ac0a-b35270aad630.roa (raw, json) Hash identifier: t0moWCncrZIsOnZvYG/6Yzcb0p8PcxuYuufg53dX7t8= Subject key identifier: C7:08:CA:21:68:C6:7A:A4:63:A1:5D:3C:B6:BA:98:DC:21:21:C9:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584B715CCFDB90AA6819B64D8800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 7029 IP address blocks: 2607:fd68::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:cf:db:90:aa:68:19:b6:4d:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=fb128056-8c66-4c14-ab58-96773b87bfc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bb:91:94:1f:96:fb:b2:be:87:b1:d0:b9:f0: 7c:75:96:39:35:b4:85:7d:e0:e9:a0:a1:5b:66:fd: 37:f1:ef:fa:97:da:79:0c:94:4b:6e:dd:af:e0:54: b2:b8:f1:e7:1d:60:6a:99:dd:b1:ce:f0:8f:6b:70: 00:e1:1d:9d:2d:3a:24:cb:4b:eb:2c:69:bf:a4:4f: 65:d0:ed:4a:08:01:96:ba:b5:06:74:6b:b9:81:98: 2b:bc:15:3d:6b:69:9a:c1:36:6b:92:b3:8f:d8:30: fb:49:8e:0f:0f:6d:f2:a9:86:25:56:6c:e6:c3:06: 5e:85:31:26:0c:25:74:bc:8a:74:e1:5d:ed:2f:57: 78:24:0e:11:4a:98:62:16:3e:30:f0:bd:8c:4c:d4: b1:41:f8:07:33:f1:0d:d3:2e:e2:34:4d:ca:d1:6b: 08:ca:80:81:24:42:a8:db:b0:f2:e3:b9:28:77:bf: 58:2b:8f:4d:3c:a3:e7:ed:3b:30:5a:1a:06:6e:13: ca:4f:9c:61:2a:72:7e:3a:3a:54:b9:00:eb:57:d9: 60:3f:b1:71:01:12:93:68:d0:f7:e6:55:9b:53:c1: ac:08:72:5a:20:43:5b:87:eb:c7:97:27:f1:92:8f: e9:c1:78:f5:37:2a:3c:86:78:d6:b6:c3:30:c7:43: 39:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:CA:21:68:C6:7A:A4:63:A1:5D:3C:B6:BA:98:DC:21:21:C9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/add55bdb-6ba7-3da3-ac0a-b35270aad630.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2607:fd68::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:91:ec:6c:3c:f1:c5:79:db:62:39:9f:ab:a6:f3:9b:72:d6: ce:61:3c:54:60:60:99:c7:18:7e:81:52:16:55:42:cf:48:4b: 09:0b:9e:4b:3e:42:7c:9d:f4:69:e3:88:06:e0:3f:67:c6:f3: 6a:10:51:ee:51:44:ab:47:e2:86:8b:b7:11:87:6a:87:69:e5: 5c:55:57:e1:7f:dd:73:75:62:01:2b:0a:01:65:d7:59:a5:f8: bc:ba:5e:d8:7e:a4:da:84:42:c9:80:9b:59:61:8f:4d:80:3c: f7:2a:ea:72:84:5f:15:fe:63:a6:ec:67:84:d3:97:44:91:60: d3:be:69:26:c5:5d:cc:24:90:a7:bb:f9:33:3a:13:58:ed:8f: 93:e2:9e:b6:68:1a:cc:72:d3:0d:cb:bb:15:08:cb:aa:a1:4a: ac:25:fb:a7:c2:0a:dc:a6:b6:a1:7f:f6:c0:77:13:9c:4d:3c: dc:57:0e:b1:55:c1:0d:ed:4d:33:f9:28:3d:45:2d:d6:a9:84: c5:cf:e9:94:33:0f:20:4e:94:3e:92:22:56:f2:24:bf:e5:77: 7f:59:c2:24:54:94:e9:18:f6:40:28:12:c9:f7:3d:00:50:bf: 74:b8:2d:40:67:16:3e:e1:5d:22:32:27:b1:c4:75:19:e9:32: de:51:c4:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtxXM/bkKpoGbZNiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk ZmIxMjgwNTYtOGM2Ni00YzE0LWFiNTgtOTY3NzNiODdiZmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLuRlB+W+7K+h7HQufB8dZY5NbSFfeDpoKFb Zv038e/6l9p5DJRLbt2v4FSyuPHnHWBqmd2xzvCPa3AA4R2dLToky0vrLGm/pE9l 0O1KCAGWurUGdGu5gZgrvBU9a2mawTZrkrOP2DD7SY4PD23yqYYlVmzmwwZehTEm DCV0vIp04V3tL1d4JA4RSphiFj4w8L2MTNSxQfgHM/EN0y7iNE3K0WsIyoCBJEKo 27Dy47kod79YK49NPKPn7TswWhoGbhPKT5xhKnJ+OjpUuQDrV9lgP7FxARKTaND3 5lWbU8GsCHJaIENbh+vHlyfxko/pwXj1Nyo8hnjWtsMwx0M5tQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMcIyiFoxnqkY6FdPLa6mNwhIckkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWRkNTViZGItNmJhNy0z ZGEzLWFjMGEtYjM1MjcwYWFkNjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf9aDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgkexsPPHFedtiOZ+rpvObctbOYTxUYGCZxxh+gVIWVULPSEsJC55L PkJ8nfRp44gG4D9nxvNqEFHuUUSrR+KGi7cRh2qHaeVcVVfhf91zdWIBKwoBZddZ pfi8ul7YfqTahELJgJtZYY9NgDz3KupyhF8V/mOm7GeE05dEkWDTvmkmxV3MJJCn u/kzOhNY7Y+T4p62aBrMctMNy7sVCMuqoUqsJfunwgrcprahf/bAdxOcTTzcVw6x VcEN7U0z+Sg9RS3WqYTFz+mUMw8gTpQ+kiJW8iS/5Xd/WcIkVJTpGPZAKBLJ9z0A UL90uC1AZxY+4V0iMiexxHUZ6TLeUcQ9 -----END CERTIFICATE-----Generated at Fri Oct 10 19:49:07 2025 by rpki-client